1. General provisions
1.1. This Privacy Policy sets out the principles for processing the personal data of people who visit the FORIAWOOD website at https://foriawood.com or contact the Company through the contact channels shown on the Website.
1.2. The purpose of this Policy is to provide clear information about the processing of personal data, the related rights of individuals and how to raise personal data protection matters.
1.3. Personal data is processed in accordance with the Law of Ukraine on Personal Data Protection and other applicable law.
1.4. Where the GDPR or other foreign law applies to specific processing, the Company takes the relevant additional obligations into account.
2. Data controller
2.1. The controller of personal data processed directly by the Company for its own purposes is LLC «FORIA».
2.2. EDRPOU code: 45598485.
2.3. Registered address: 22 Kovelska St., office 413, Lutsk, Lutsk District, Volyn Oblast, 43016, Ukraine.
2.4. Email: foria.office@gmail.com.
2.5. Phone: +380 96 220 25 40.
2.6. These channels are used, among other things, for requests regarding the processing of personal data and the exercise of related rights.
3. Categories of personal data
3.1. When contacted by email, the Company may receive the sender’s email address, name, signature, message text, attachments and other information the person provides in their enquiry.
3.2. When contacted by phone, the phone number, information provided by the person and information needed to respond to the enquiry may be processed.
3.3. The Company does not require special categories of personal data for ordinary product enquiries.
3.4. When the website is visited, technical infrastructure, including hosting and network service providers, may process the IP address, date and time of the request, the address of the requested resource, technical browser information and other information needed to deliver and protect the web resource.
3.5. The Website is hosted on Netlify. The actual scope of such technical data and the conditions and periods of its processing are determined by that provider’s service terms and configuration.
3.6. At the current stage the Website does not involve mandatory registration, personal accounts, payments or collection of bank details through its own interface.
4. Sources of data
4.1. Personal data may be received directly from people who contact the Company by email or phone.
4.2. Certain technical data may be generated automatically when a network connection with the Website is established.
4.3. The Company must not collect personal data by means incompatible with the stated lawful purposes.
5. Purposes of processing
5.1. Personal data may be processed to:
a) receive and handle enquiries;
b) provide information about the Company’s activities or products;
c) maintain communication with potential customers and partners;
d) protect the lawful rights and interests of the Company and others;
e) comply with statutory obligations;
f) maintain the technical security and availability of the website;
g) handle complaints, intellectual property claims and personal data requests.
5.2. Data must not be used for incompatible purposes without a proper legal basis.
5.3. Sending an information request is not treated as automatic consent to receive advertising mailings.
6. Legal grounds for processing
6.1. Personal data is processed where there are grounds established by applicable law.
6.2. Depending on the situation, such grounds may be proper consent, the need to take pre-contractual steps at the person’s request, compliance with a legal obligation or legitimate interest, in the cases and to the extent permitted by the relevant law.
6.3. The legal ground is determined according to the specific purpose of processing; one ground does not automatically apply to all data or purposes.
6.4. Where processing is based on consent, such consent must meet the applicable legal requirements.
6.5. Where the legal ground is legitimate interest within applicable law, the rights, freedoms and reasonable expectations of the person concerned must be taken into account.
7. Use of email and telephone
7.1. The Company uses the address foria.office@gmail.com for email correspondence.
7.2. Sending messages to this address involves processing of the relevant email correspondence through the Gmail (Google) mail infrastructure.
7.3. During phone calls, technical connection data may be processed by electronic communications operators in accordance with their obligations and legal grounds.
7.4. The Company must not use data received in an enquiry for unrelated purposes without a proper legal basis.
7.5. If call recording, separate enquiry handling systems or a CRM are introduced in the future, this Policy must be updated before such processing begins.
8. Sharing data with others
8.1. Email, electronic communications, hosting and technical infrastructure providers may be used to operate the Website and communicate.
8.2. Personal data is shared only where there is a proper legal basis and to the extent necessary for the relevant purpose.
8.3. The Company may provide data to competent public authorities in the cases and manner provided by law.
8.4. Using third-party services does not release the Company from its own obligations regarding personal data.
8.5. As at the date of publication of this version, Website visitors’ technical data is processed by the hosting provider Netlify in accordance with its service terms; the Company uses Gmail (Google) for corporate email. The Website has no separately integrated third-party analytics or advertising services or embedded third-party widgets. If providers or integrations change, the Company will update this Policy.
9. International transfers
9.1. Depending on the providers’ infrastructure, processing or storage of certain data may involve international transfers.
9.2. The Company must check the applicable requirements for such transfers and appropriate safeguards where required.
9.3. Gmail (Google) and the hosting provider Netlify may process data on servers outside Ukraine; such processing takes place under the respective providers’ terms, subject to clause 9.2.
9.4. This Policy does not mean that any international transfer is permitted without an appropriate legal basis.
10. Retention periods
10.1. Personal data must not be kept longer than necessary for the defined lawful purposes unless a longer period is established by law.
10.2. Criteria for the retention period may include the nature of the enquiry, the need to continue communication, contractual or statutory obligations and the need to protect rights.
10.3. Information no longer needed for further processing is to be properly deleted, destroyed or otherwise lawfully handled.
10.4. The Company retains personal data for no longer than is necessary to fulfil the specified purposes of processing, taking into account the nature of the interaction, applicable legal requirements and the need to protect legitimate rights and interests. The following retention periods apply to the principal categories of email correspondence received at foria.office@gmail.com:
a) general enquiries, product-related questions and other correspondence with prospective or existing customers are retained for no longer than 12 months after the relevant correspondence has concluded, unless another lawful basis requires or permits further retention;
b) partnership enquiries, commercial proposals and correspondence concerning potential business cooperation are retained for no longer than 24 months after the last substantive interaction, unless the relationship develops into a contractual arrangement or another lawful basis for retention arises;
c) information relating to the conclusion or performance of contracts, accounting and tax obligations, compliance with legal requirements or the resolution of disputes may be retained for different periods where required by applicable law or necessary for the establishment, exercise or defence of legal claims.
Upon expiry of the applicable retention period, and in the absence of another lawful basis for retention, personal data will be deleted or otherwise cease to be processed in accordance with the Company’s actual data management procedures.
These retention periods do not restrict the rights granted to data subjects under applicable law, including the right to request access to, rectification of or erasure of their personal data where the relevant legal requirements are met.
Retention periods for technical logs and data processed by the hosting provider depend on the type of data, the applicable service terms and the provider’s actual retention practices.
11. Security of personal data
11.1. The Company applies appropriate organisational and technical measures to reduce the risks of unauthorised access, loss, alteration or unlawful disclosure of data.
11.2. Such measures may include account access control, multi-factor authentication, software updates, protection of backups and checks of the website configuration.
11.3. Access to personal data should be granted only to those who need it to perform their proper functions.
11.4. No information system can guarantee the complete elimination of all risks.
11.5. The Company undertakes to comply with the applicable legal requirements for responding to personal data security incidents.
12. Rights of individuals
12.1. Individuals have the rights regarding their own personal data provided by applicable law.
12.2. In particular, in the cases provided by law, a person may make a request regarding:
- information about the processing;
- access to their personal data;
- correction of inaccurate information;
- stopping unlawful processing;
- deletion or destruction of data where there are legal grounds;
- withdrawal of consent where processing is based on it;
- objection to certain types of processing;
- protection of their rights before competent authorities or a court.
12.3. Where the GDPR applies to specific processing, additional rights are exercised in accordance with its provisions and the established exceptions.
12.4. To exercise these rights, write to foria.office@gmail.com.
12.5. Where necessary, the Company may carry out a proportionate check of the requester’s identity to prevent unauthorised disclosure of data.
12.6. Requests are handled within the time limits and procedures established by applicable law.
13. Cookies and analytics
13.1. Detailed information about the cookies and similar technologies actually used is provided in the Cookie Policy.
13.2. According to the current described configuration, the website does not use advertising trackers or behavioural analytics systems; this must be confirmed by a technical audit before publication.
13.3. If analytics, marketing technologies or third-party integrations are added in the future, the Company must provide appropriate information and comply with consent requirements where they apply.
14. Changes to this Policy
14.1. The Company may update this Policy to reflect changes in the law, technical infrastructure, Website functionality or actual data processing.
14.2. The current version is published on the website with its effective date.
14.3. Where applicable law requires separate notice or another procedure, that procedure must be followed.
15. Personal data contacts
LLC «FORIA»
EDRPOU code: 45598485.
Address: 22 Kovelska St., office 413, Lutsk, Lutsk District, Volyn Oblast, 43016, Ukraine.
Email: foria.office@gmail.com.
Phone: +380 96 220 25 40.
Website: https://foriawood.com